Found a security issue in 2anki.net, the API, or the open-source repository? Email support@2anki.net with a clear write-up, steps to reproduce, and what you could access.